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Abstract 



'^yS^9.5i:TP:pr?vept m use from being performed when iiiTppy occurs by starting the monitor of 

a-Weimonitoiingime^^^^ t|me:of an IC card as reference, arid operating a riormaJ 

QRenabbn stopping means by the detection of the time frionitoring meaihs wheh no IC card is loaded for 

pi-escribecl:time: ;;■ ^v: : :• .: : ; . • ^ , 

P^NS|jTyT!QN:.The;ab time monitoring means 8 arid the riormai oiDera 

stoppirig means 1, 3 b, and the start of the monitoring time of the tiriie monitoring mearis 8 is set at the 
extraction time of the IG card 20, When no IC card 20 is- loaded for the prescribed time, the normal operation 
stopping means 1, 3b are operated by the detection of the time monitoring means 8, and for example the 
normal 'data processing of portable tejrninal equipment. can be blocked by erasing an input processing 
program and :nul|ifyihg stored data. Thereby, the malfeasant use can be prevented from being performed 
Whenthie burglary occurs. . f". . ■ 
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circuit 8, the anti-theft program 3a causes a processing program 
such as an input data processing program 3c or the like to overrun 
to thereby active the operation suspension program 3b. 

With the theft flag 14 raised, the operation suspension program 
3b invalidates or erase data in a predetermined region in the 
memory 3 to suspend operation of the settlement terminal 10 and, 
moreover, erases the input data processing program 3c stored- 
in the memory 3. This makes it impossible to apply processing, 
such as input or output, with respect to data stored, as a result 
of which the device does not operate normally. When the theft 
flag 14 is not raised, meaningless data may be written in an 
input data storing region in a mounted IC card 20 or memory 3 
or the processing program may be caused to overrun, to thereby 
prevent the device from performing normal operation. 

Here, the time monitoring circuit 8 is controlled by the 
microprocessor 1. When the microprocessor 1 confirms that the 
mounted IC card 20 has a particular code, the microprocessor 
1 causes the time monitoring circuit 8 to suspend time 
monitoring and resets the measured time value to zero. When 
the microprocessor 1 detects a situation in which no IC card 
having the particular code is mounted or such an IC card has 
been removed, the microprocessor 1 sends an activation signal 
to the time monitoring circuit 8 to have it start time measuring. 
Note that a time for the time monitoring circuit 8 to monitor 
can be desirably set by the microprocessor 1, and the setting 
is achieved using an input from an input device 5. Whether or 
not the IC card has a particular code is determined by reading 
out an ID code attached to the IC card to verify relative to 
an ID code 15. 

The above-constructed settlement terminal 10 maybe installed, 
for example, as an IC card shopping terminal device in a register 
in a supermarket for use as a terminal which writes product 
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purchase money data in an IC card of a predetermined customer 
to attain cashless shopping. In this case, identical data to 
the data written in the IC card is stored in the terminal device 
as back-up data, and a corresponding amount of money is debited 
later from the customer's bank account. Therefore, in this 
system, a person in charge of registers, or the like, itinerates 
the registers for every two hours, for example, while carrying 
a dedicated IC card, and loads the IC card to the terminal device 
to record the various data, including the above-mentioned data, 
stored in the terminal device in the IC card. 

Suppose that the setting time of the time monitoring circuit 
8 is 2.5 hours in this system. In this case, when an IC card 
with a particular code is not loaded by the person in charge 
after 2.5 hours have elapsed, the time monitoring circuit 8 
sends an interruption signal to the microprocessor 1 to activate 
the anti-theft program 3a, and further the operation suspension 
program 3b. As a result, a processing program in the settlement 
terminal 10 overruns or meaningless data is written in an IC 
card mounted or stored in the memory 3. Then, only when the 
particular IC card indicative of the person in charge is loaded, 
the time monitoring is suspended with the monitored time 
returned to zero. Note that, because time monitoring is 
suspended only when an IC card indicative of a person in charge 
is loaded in this case, time monitoring should be set suspended 
during a night time according to a predetermined procedure, and 
the terminal device may be saved in a safety box or the lake. 

Here, in a case where the settlement terminal 10 is stolen and 
taken out of the supermarket, there is a risk that the purchase 
money data which is stored as back-up in the terminal device 
may be analyzed and that balance data in the IC card may be 
manipulated. In order to prevent this risk, the system is 
designed such that the signal transmitting device 21 emits 
predetermined electric waves in the supermarket so that the 
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settlement terminal 10 continuously receives signals via its 
plate-like antenna 8 in the terminal device. When the 
settlement terminal 10 is stolen and taken out of the 
supermarket, the radio wave strength detection circuit 7 of the 
settlement terminal 10 detects a drop in strength of the 
received electric wave to below a predetermined level. An 
interruption signal resulting from the detection signal causes 
the microprocessor 1 to activate the anti-theft program 3a and 
further the operation suspension program 3b to thereby set a 
theft flag 14 and give an alarm, so that the stored back-up data 
and the input data processing program 3d are erased. With the 
above, the stored data will not be read out and used illegally. 
In addition, since a part of the processing program of the 
terminal device is erased, the terminal device does not operate 
normally. 

Such a settlement terminal 10 may be used as an IC card working 
hour management terminal device. An example of such a use will 
be described. Note that in this case, an interruption by a 
detection signal from the time monitoring circuit 8 is treated 
equally to an interruption by the radio wave strength detection 
circuit 7. Instead of the time monitoring circuit 8 releasing 
time measuring in response to detection of presence/absence of 
a particular IC card, input of a particular secret ID code from 
the input device 5 causes to release time measuring. 

The IC card working hour management terminal device recordstdata 
regarding the time at which an individual arrives at or leaves 
a workplace, or the like, in an IC card loaded thereto by the 
individual arriving at or leaving the working place. The IC 
cards are collected once a month so that the recorded arrival 
and leaving times are read out for calculation of the working 
hours. Similar to the above, identical data to that which is 
recorded in the IC card is recorded as back-up in the IC card 
working hour management terminal device. When the terminal 
device is stolen, there is a risk that the data recorded in the 



4 



IC card can be manipulated. In order to prevent this risk, a 
■person in charge inputs a secret IC code in the terminal device, 
every three hours via the input device 5. The working hour 
management terminal device compares the input secret IC code 
and a code stored inside (corresponding to an ID code 15) to 
determine if the input code is a code for releasing a monitored 
time by the time monitoring circuit 8. When the codes match 
to each other, the working hour management terminal device 
controls the time monitoring circuit 8 to reset the measured 
time. Note that suppose that a setting time for the time 
monitoring circuit 8 is four hours here. 

The terminal device monitors four hours, and, when no secret 
ID code is input even after four hours has passed, determines 
that the terminal device has been stolen. Then, the terminal 
device activates the anti-theft program 3a by means of 
interruption by the time monitoring circuit 8. Then, the 
operation suspension program 3b is also activated to give an- 
alarm. As a result, it is known that a person who has stolen 
the device possesses the terminal device. Only when a correct 
secret IC number is input, time monitoring by the terminal- 
device can be returned to the initial state . Note that, similar 
to the above, time monitoring may be set suspended or set with 
a long time during a night time. This setting is achieved using 
a particular code. Then, the terminal device can be saved in 
a safety box. 

^% 

It should be noted that, although only an IC card having a 
specific code can make time monitoring to be returned to the 
initial state, as described above, in this embodiment, it is 
not necessary to be achieved using a particular IC card. 

Moreover, beside what is described in the above, such processing 
may be applied as a normal operation suspension means, that " 
invalidates information on a key which is input from the 
terminal device . 
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